CVE-2026-19998— code-projects Online Shopping System offersmail.php cross site scripting
Possible ATT&CK Techniques 2AI
T1059 · Command and Scripting Interpreter T1189 · Drive-by CompromiseAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| code-projects | Online Shopping System | 1.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-19998
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
code-projects Online Shopping System offersmail.php cross site scripting
Source: CVE Program / CVE List V5
Vulnerability Description
A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file offersmail.php. Executing a manipulation of the argument email can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Vulnerability Title
Code-Projects Online Shopping System 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Code-Projects Online Shopping System是Code-Projects组织的一个在线购物系统。 Code-Projects Online Shopping System 1.0版本存在安全漏洞，该漏洞源于对文件offersmail.php中参数email的错误操作，可能导致跨站脚本攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| code-projects | Online Shopping System | 1.0 | cpe:2.3:a:code-projects:online_shopping_system:*:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-19998
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-19998
请登录查看更多情报信息。
Other References for CVE-2026-19998 (1)
IV. Related Vulnerabilities
Same product: Online Shopping System
- CVE-2026-19923
code-projects Online Shopping System checkout_process.php sq - CVE-2026-19922
code-projects Online Shopping System checkout.php cross site - CVE-2026-19921
code-projects Online Shopping System homeaction.php sql inje - CVE-2026-19920
code-projects Online Shopping System action.php sql injectio - CVE-2026-19919
code-projects Online Shopping System Login login.php sql inj
Same vendor: code-projects
- CVE-2026-76990
code-projects Simple Inventory System delete.php sql injecti - CVE-2026-76799
code-projects Login Registration System SQL Database Backup - CVE-2026-76764
code-projects Employee Management System Admin Login Endpoin - CVE-2026-76762
code-projects Assessment Management welcome.php sql injectio - CVE-2026-76574
code-projects Hospital Information System User Login UsersCo
Same weakness: CWE-79
- CVE-2026-66917
Joomla Extension - joomgalleryfriends.net - Stored XSS in Jo - CVE-2026-53529
LeafWiki vulnerable to stored XSS via search-result title (h - CVE-2026-33240
Combodo iTop: Reflected XSS in foreign key search criteria - CVE-2026-43980
Malla: Stored XSS via Meshtastic node names in multiple fron - CVE-2026-53468
Typemill has Stored HTML Attribute Injection in Metadata Fie
V. Comments for CVE-2026-19998
No comments yet